$ rpki-client -vvf rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft File: MjnArILZQnKmoJ37KpCmZzCbOHM.mft (raw, json) Hash identifier: yZxtrOdSVnfHuJ0mHZqYobR1Wy+U/8WB32MwusAeW5Q= Subject key identifier: DC:6C:86:27:84:67:40:16:53:60:BC:0A:41:A5:68:1B:08:D0:64:4B Authority key identifier: 32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73 Certificate issuer: /CN=A9152643/serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873 Certificate serial: 0476 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft Manifest number: 0472 Signing time: Thu 21 Aug 2025 00:14:47 +0000 Manifest this update: Thu 21 Aug 2025 00:14:47 +0000 Manifest next update: Thu 28 Aug 2025 00:14:47 +0000 Files and hashes: 1: MjnArILZQnKmoJ37KpCmZzCbOHM.crl (hash: 3UcbtsFjswwK70aLPCJjoo+h2PIuuGf1vZ9wQxP7Kd4=) 2: 36837F32574A11EC911FAC86C4F9AE02.roa (hash: +23ZbgbMoVqy8WS3A424MrxHSnobech3EJ/pMbqrIKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 00:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1142 (0x476) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152643, serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873 Validity Not Before: Aug 21 00:14:47 2025 GMT Not After : Aug 28 00:14:47 2025 GMT Subject: CN=68a664f7-cb4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d2:e1:97:72:70:45:fe:47:f0:da:57:b5:21: 79:a8:6e:71:f2:4d:08:92:f9:4f:bf:d6:da:db:ee: ee:bd:c7:45:d4:29:9e:76:90:eb:e1:91:a1:ef:55: 13:01:5f:1f:43:4b:d7:f2:d4:78:f1:48:9a:76:82: e1:bd:83:18:46:0a:2f:6c:c3:76:bf:93:06:25:25: 53:d9:ae:6f:cf:87:da:c3:30:02:c7:d2:19:d0:b3: 9d:44:d6:2d:25:0e:76:8a:a7:92:45:c9:dc:34:5b: 92:2e:e5:ed:ce:42:a3:0c:97:74:ff:ea:fb:40:0b: 24:5e:43:46:67:86:21:f6:62:80:db:70:4e:4f:d6: e6:b9:40:7b:ac:f9:97:ab:e8:48:85:28:79:72:12: 26:3b:3e:01:5b:18:3d:45:15:43:8e:69:0b:f3:aa: ee:17:6c:a7:2f:2b:e1:25:2d:1c:e4:35:99:be:f9: 2d:4e:ca:1f:e9:ad:2a:89:e6:f8:a7:71:2c:e5:dd: bd:22:69:02:ca:a9:d1:75:f1:6a:e1:8f:cd:12:e7: 21:0b:92:2b:b2:28:70:d7:8e:1b:e0:fb:b8:6d:09: ab:68:12:71:13:46:34:ac:7c:19:33:56:16:36:f6: 19:78:3d:21:74:82:b3:36:70:23:ee:61:ee:22:96: 24:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6C:86:27:84:67:40:16:53:60:BC:0A:41:A5:68:1B:08:D0:64:4B X509v3 Authority Key Identifier: keyid:32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:8b:4c:96:d4:ea:c0:76:aa:a8:c3:ba:54:91:10:58:fb:24: d2:63:69:38:c5:6b:3c:26:7f:9c:82:9c:1e:26:94:8d:03:a0: 62:90:fb:7e:17:b3:6f:ad:e3:2c:0b:45:2f:8f:9a:3a:25:57: 53:ec:87:3b:d1:a7:eb:3c:56:8e:6b:bf:c6:84:0d:e0:34:cc: 0e:06:53:45:3b:04:54:0d:9a:52:cf:ea:88:79:fc:32:f7:ea: b0:e3:ae:81:a2:c5:41:50:7c:cd:8d:40:8b:54:69:e5:21:79: 25:a0:1e:c7:c7:dd:d3:df:aa:fb:6c:a8:13:5f:91:df:59:89: 25:61:d4:b1:af:dc:d6:48:bd:99:ef:b9:be:08:be:f3:99:c0: c6:66:30:c5:e9:2a:e0:30:dd:d5:1a:5e:2f:31:8f:0a:98:48: b7:dc:d2:fa:f2:23:ab:7d:74:2d:04:a7:b7:cb:ac:8c:05:0d: ab:15:d2:d4:85:74:54:23:37:39:e3:37:3c:2e:19:f0:db:7d: 56:96:68:88:0e:71:5e:28:7c:f0:62:5f:29:31:7f:e7:ef:6a: b7:af:c9:68:a0:9a:26:a2:30:23:ed:fd:fe:2a:6b:38:63:33: a3:da:c2:1f:9f:59:2b:b0:3c:01:e3:0a:53:b7:d3:bb:05:1d: c5:e8:58:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI2NDMxMTAvBgNVBAUTKDMyMzlDMEFDODJEOTQyNzJBNkEwOURGQjJBOTBBNjY3 MzA5QjM4NzMwHhcNMjUwODIxMDAxNDQ3WhcNMjUwODI4MDAxNDQ3WjAYMRYwFAYD VQQDEw02OGE2NjRmNy1jYjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk9Lhl3JwRf5H8NpXtSF5qG5x8k0IkvlPv9ba2+7uvcdF1CmedpDr4ZGh71UT AV8fQ0vX8tR48UiadoLhvYMYRgovbMN2v5MGJSVT2a5vz4fawzACx9IZ0LOdRNYt JQ52iqeSRcncNFuSLuXtzkKjDJd0/+r7QAskXkNGZ4Yh9mKA23BOT9bmuUB7rPmX q+hIhSh5chImOz4BWxg9RRVDjmkL86ruF2ynLyvhJS0c5DWZvvktTsof6a0qieb4 p3Es5d29ImkCyqnRdfFq4Y/NEuchC5Irsihw144b4Pu4bQmraBJxE0Y0rHwZM1YW NvYZeD0hdIKzNnAj7mHuIpYkEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxshieE Z0AWU2C8CkGlaBsI0GRLMB8GA1UdIwQYMBaAFDI5wKyC2UJypqCd+yqQpmcwmzhz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjY0My83MzgwNTJBRTU3 NDgxMUVDQjQyNTJCODZDNEY5QUUwMi9Nam5BcklMWlFuS21vSjM3S3BDbVp6Q2JP SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01qbkFySUxaUW5LbW9KMzdLcENtWnpDYk9ITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjY0My83MzgwNTJBRTU3NDgxMUVDQjQyNTJCODZDNEY5QUUwMi9Nam5BcklMWlFu S21vSjM3S3BDbVp6Q2JPSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZi0yW1OrAdqqow7pUkRBY+yTSY2k4xWs8Jn+cgpweJpSNA6BikPt+ F7NvreMsC0Uvj5o6JVdT7Ic70afrPFaOa7/GhA3gNMwOBlNFOwRUDZpSz+qIefwy 9+qw466BosVBUHzNjUCLVGnlIXkloB7Hx93T36r7bKgTX5HfWYklYdSxr9zWSL2Z 77m+CL7zmcDGZjDF6SrgMN3VGl4vMY8KmEi33NL68iOrfXQtBKe3y6yMBQ2rFdLU hXRUIzc54zc8Lhnw231WlmiIDnFeKHzwYl8pMX/n72q3r8looJomojAj7f3+Kms4 YzOj2sIfn1krsDwB4wpTt9O7BR3F6Fjz -----END CERTIFICATE-----Generated at Fri Aug 22 16:18:19 2025 by rpki-client